lkml.org 
[lkml]   [2011]   [Jan]   [6]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
/
SubjectRe: [PATCH] System Wide Capability Bounding Set
From
Date

On Jan 6, 2011, at 6:30 AM, Tetsuo Handa wrote:

> An LSM module can provide ability to aggregate several tasks into a group
> (called "security context" or "domain") and grant permissions against groups.
> We can selectively grant whatever capabilities against groups.
> Why do we need to get bothered by capability inheritance problem?

Yes, but LSM modules still can't stack, last I checked. So people would need to choose between this or SELinux, or build this capability into every single LSM module....

-- Ted



\
 
 \ /
  Last update: 2011-01-06 17:53    [W:0.135 / U:0.612 seconds]
©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site